[YARN-9617] RM UI enables viewing pages using Timeline Reader for a user who can not access the YARN config endpoint

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.1.1
• Component/s: yarn-ui-v2
• Assignee: Akhil PB
• Reporter: Balázs Szabó
• Created: 11/Jun/19 11:11
• Updated: 21/Apr/20 02:20

Description

If a user who can not access the /conf endpoint she/he will be unable to query the address of the Timeline Service Reader (yarn.timeline-service.reader.webapp.address). In this case, the user receives a "403 Unauthenticated users are not authorized to access this page" response, when trying to view pages requesting data from the Timeline Reader (i.e. Flow Activity tab). In this case the UI is falling back to the default address (localhost:8188), which eventually yields the 401 response (see attached screenshots).